Software update: VMware Workstation Pro 15.5.1

VMware has released version 15.5.1 of its virtualization software Workstation Pro. With this program it is possible to create one or more virtual computers on which a large number of different operating systems can be installed. That way, they can be used side by side, unlike a dual boot setup, where one OS or the other has to be chosen. VMware Workstation is available for Windows and Linux, and licenses start at around 275 euros. Below you can find the improvements VMWare has made in version 15.5.1:

This release of VMware Workstation Pro addresses the following issues:

• Workstation 15.5.1 Pro addresses an out-of-bounds write vulnerability in the e1000e virtual network adapter. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2019-5541 to this issue. For more information, see VMSA-2019-0021.
• Workstation 15.5.1 Pro addresses an information disclosure vulnerability in vmnetdhcp. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2019-5540 to this issue. For more information, see VMSA-2019-0021.
• Workstation 15.5.1 Pro addresses a denial-of-service vulnerability in the RPC handler. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2019-5542 to this issue. For more information, see VMSA-2019-0021.
• Workstation 15.5.1 Pro resolves TSX Asynchronous Abort (TAA), a speculative execution vulnerability identified by CVE-2019-11135. For more information, see section 3b in VMSA-2019-0020.
• Workstation 15.5.1 Pro resolves a regression introduced in Workstation 15.5.0 Pro which causes the Hypervisor-Specific mitigations for L1TF and MDS vulnerabilities to be ineffective. For more information on these mitigations, please see section 3a in VMSA-2019-0008.